fix GHSA-4v7x-pqxf-cx7m

Signed-off-by: hectorj2f <hector@chainguard.dev>

dagdotdev.yaml

@@ -1,7 +1,7 @@
 package:
   name: dagdotdev
   version: 0.0.2
-  epoch: 1
+  epoch: 2
   description: oci and apk explorer
   copyright:
     - license: Apache-2.0
@@ -25,6 +25,10 @@ pipeline:
       repository: https://github.com/jonjohnsonjr/dagdotdev
       tag: v${{package.version}}
 
+  - uses: go/bump
+    with:
+      deps: golang.org/x/net@v0.23.0
+
   - uses: go/build
     with:
       packages: .

dgraph.yaml

@@ -1,7 +1,7 @@
 package:
   name: dgraph
   version: 23.1.0
-  epoch: 7
+  epoch: 8
   description: A distributed graph database
   copyright:
     - license: Apache-2.0
@@ -35,7 +35,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: golang.org/x/net@v0.17.0 golang.org/x/crypto@v0.17.0 google.golang.org/grpc@v1.56.3 google.golang.org/protobuf@v1.33.0
+      deps: google.golang.org/grpc@v1.56.3 google.golang.org/protobuf@v1.33.0 golang.org/x/net@v0.23.0
 
   - runs: |
       make install_oss

dive.yaml

@@ -1,7 +1,7 @@
 package:
   name: dive
   version: 0.12.0
-  epoch: 3
+  epoch: 4
   description: A tool for exploring each layer in a docker image
   copyright:
     - license: MIT
@@ -24,7 +24,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/docker/docker@v24.0.9
+      deps: github.com/docker/docker@v24.0.9 golang.org/x/net@v0.23.0
 
   - uses: go/build
     with:

eksctl.yaml

@@ -1,7 +1,7 @@
 package:
   name: eksctl
   version: 0.175.0
-  epoch: 1
+  epoch: 2
   description:
   copyright:
     - license: Apache-2.0
@@ -25,7 +25,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: google.golang.org/protobuf@v1.33.0 github.com/docker/docker@v24.0.9
+      deps: google.golang.org/protobuf@v1.33.0 github.com/docker/docker@v24.0.9 golang.org/x/net@v0.23.0
 
   - runs: |
       make binary

envoy-ratelimit.yaml

@@ -3,7 +3,7 @@ package:
   # This project doesn't do releases and everything is commit based.
   # This corresponds to commit f3b67307a53c3979783bef4de8bfa655167b0807
   version: 0.0_git20240220
-  epoch: 5
+  epoch: 6
   description: Go/gRPC service designed to enable generic rate limit scenarios from different types of applications.
   copyright:
     - license: Apache-2.0
@@ -25,7 +25,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: google.golang.org/protobuf@v1.33.0
+      deps: google.golang.org/protobuf@v1.33.0 golang.org/x/net@v0.23.0
       modroot: ratelimit
 
   - uses: go/build

falcosidekick.yaml

@@ -1,7 +1,7 @@
 package:
   name: falcosidekick
   version: 2.28.0
-  epoch: 4
+  epoch: 5
   description: Connect Falco to your ecosystem
   copyright:
     - license: MIT
@@ -23,7 +23,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: golang.org/x/crypto@v0.17.0 golang.org/x/net@v0.17.0 github.com/nats-io/nkeys@v0.4.7 google.golang.org/grpc@v1.56.3 github.com/cloudevents/sdk-go/v2@v2.15.2 google.golang.org/protobuf@v1.33.0 github.com/jackc/pgx/v5@v5.5.4
+      deps: github.com/nats-io/nkeys@v0.4.7 google.golang.org/grpc@v1.56.3 github.com/cloudevents/sdk-go/v2@v2.15.2 google.golang.org/protobuf@v1.33.0 github.com/jackc/pgx/v5@v5.5.4 golang.org/x/net@v0.23.0
 
   - runs: |
       make falcosidekick RELEASE=${{package.version}}

flyte.yaml

@@ -1,7 +1,7 @@
 package:
   name: flyte
   version: 1.11.0
-  epoch: 1
+  epoch: 2
   description: Scalable and flexible workflow orchestration platform that seamlessly unifies data, ML and analytics stacks.
   copyright:
     - license: Apache-2.0
@@ -24,7 +24,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/cloudevents/sdk-go/v2@v2.15.2 github.com/jackc/pgproto3/v2@v2.3.3 github.com/jackc/pgx/v5@v5.5.4 github.com/jackc/pgconn@v1.14.2 golang.org/x/crypto@v0.17.0 google.golang.org/protobuf@v1.33.0 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0 go.opentelemetry.io/otel/sdk@v1.21.0 github.com/go-jose/go-jose/v3@v3.0.3 github.com/lestrrat-go/jwx@v1.2.29
+      deps: github.com/cloudevents/sdk-go/v2@v2.15.2 github.com/jackc/pgproto3/v2@v2.3.3 github.com/jackc/pgx/v5@v5.5.4 github.com/jackc/pgconn@v1.14.2 golang.org/x/net@v0.23.0 google.golang.org/protobuf@v1.33.0 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.46.0 go.opentelemetry.io/otel/sdk@v1.21.0 github.com/go-jose/go-jose/v3@v3.0.3 github.com/lestrrat-go/jwx@v1.2.29
 
   - uses: go/build
     with: